Privacy & Your Data¶
Revoir is built on a simple principle: your data belongs to you.
Our Privacy Promise¶
- ✅ All data stays on your device
- ✅ No cloud sync, no servers
- ✅ No analytics that track you
- ✅ No selling data to advertisers
- ✅ You can delete everything instantly
What We Don't Collect¶
From the app, we collect nothing:
- No dates or people you log
- No mood check-ins
- No photos or moments
- No usage patterns
- No device identifiers
What We Do Collect¶
Website Only¶
If you sign up for our waitlist or visit our website:
- Email address (waitlist only)
- Aggregated, anonymous analytics
This data is completely separate from the app.
Where Your Data Lives¶
On Your Device¶
All app data is stored locally using iOS's secure storage:
- SwiftData database — Your dates, people, moods
- Local file system — Photos and exports
- iOS Data Protection — Encrypted when device is locked
Not in the Cloud¶
- No iCloud sync
- No backup to our servers
- No way for us to access your data
Device Loss
Because data is local-only, if you lose your device without a backup, your data is lost. Use the Export feature to create backups.
Your Controls¶
App Lock (Face ID / Touch ID)¶
Protect your dating journal with biometric authentication:
- Go to Settings → Security
- Enable App Lock
- Choose a lock delay:
| Delay | When It Locks |
|---|---|
| Immediately | As soon as you leave the app |
| After 15 seconds | Brief switches won't trigger lock |
| After 1 minute | Moderate protection |
| After 5 minutes | Convenient for frequent use |
When locked, Revoir requires Face ID, Touch ID, or your device passcode to open.
What if biometrics fail?
If Face ID or Touch ID isn't working, Revoir falls back to your device passcode automatically.
App Lock is preserved
If you use "Delete All Data," your App Lock settings are kept for security.
Export Your Data¶
Download all your data anytime:
- Settings → Data Management → Export All Data
- Save the JSON file to Files, iCloud, or email
Delete Everything¶
Permanently erase all data:
- Settings → Data Management → Delete All Data
- Confirm twice (this is irreversible)
- App resets to onboarding
Privacy in Exports¶
When sharing cards or PDFs:
- Privacy Mode ON (default): Names become "Person A", "Person B"
- Privacy Mode OFF: Real names shown (opt-in)
Technical Details¶
For the security-minded:
| Aspect | Implementation |
|---|---|
| Storage | SwiftData (local SQLite) |
| Encryption | iOS Data Protection (AES-256) |
| Network | Zero network calls for user data |
| Analytics | None in app |
| Third-party SDKs | None with data access |
Questions?¶
See our FAQ or contact us at [email protected].